After update from 4.6.3.6 to 4.7.1.2 the Filter does not filter anymore.

[ChildFilter55]

Hello

I updated the NXFilter on a Raspberry P4 from version 4.6.3.6 to version 4.7.1.2. Unfortunately, the filter no longer has any effect.

Does anyone already have experience with the same problem? Have significant things changed from version 4.6 to 4.7?

Of course I took the correct Deb version and the update ran without error. I can also configure the interface and the changes are confirmed with a green message. So I really don't know what to do.

The application is a WiFi transmitter with the NX filter connected and it filters out unsuitable pages for children (porn etc.).
It is mainly used with Apple mobile devices.

I would be very grateful for some help.

[ChildFilter55]

One mistake is on my account. I forgot to set the time in the policy. The iPad works now with it.

But the iPhone bypasses it, even though I am in flight mode and only have wifi activated, which is inexplicable to me.

This is now inexplicable to me.

[support200]

So, it's working as it filters your iPad. For your iPhone, what you need to do is to find out which DNS server it is using. You can see the network info using Net Analyzer in App Store.

[ChildFilter55]

Ok, I did that. The Rasperrypi has the IP 192.168.10.1, the iPad 192.168.10.106 and the iPhone has 192.168.10.125.

The iPhone is in flight mode, only the wifi with NXFilter is active and Bluetooth is off.

I have not excluded any IP and the devices have access via SSID and password. There is only one user, which should be enough for children.

I just can't understand it.

[support200]

So, your iPhone is using 192.168.10.1 as its DNS server? Do you see your NxFilter IP as the DNS server IP in Net Analyzer info?

If I were you, I would try to see if it's using NxFilter as its DNS server first. I might use Nslookup and change its server IP address and send some traffic to NxFilter and see what's happening in its log file that is /nxfilter/log/nxfilter.log. And then I will use a browser on iPhone to access a website and see if anything happening in the log file.

[ChildFilter55]

So, your iPhone is using 192.168.10.1 as its DNS server? Do you see your NxFilter IP as the DNS server IP in Net Analyzer info?

This information shows me, that the DNS-Server ist NXFilter, or not? The 192.168.10.1 is the NXfilte or not? Sorry but I'm a beginner. 😁

If I were you, I would try to see if it's using NxFilter as its DNS server first. I might use Nslookup and change its server IP address and send some traffic to NxFilter and see what's happening in its log file that is /nxfilter/log/nxfilter.log. And then I will use a browser on iPhone to access a website and see if anything happening in the log file.

I'm not that familiar with the Raspberry. The information /nxfilter/log/nxfilter.log can I also find it under the NXFilter menu? Or do I have to download the log file from the Raspberry?

Where do I change the IP address of the DNS-server?

[ChildFilter55]

No! Now I can see in NXFilter that the DNS server should be called 192.168.1.1!
So my earlier assertion that 192.168.10.1 should be NXFilter is not correct.

Now I wonder where this 192.168.10.1 comes from, which is given as the DNS server.

On the iPad, the correct DNS IP is 192.168.10.1, which is why it works.

[ChildFilter55]

Whatever, with the Netanalyzer app on the iPhone and the iPad, both have the same information.

However, the iPhone is not filtered, the iPad is. This far exceeds my logic and my experience. Since I am not so at home with all these DNS/IP/etc.

I will look further tomorrow.

[support200]

Do you use VPN? It seems like your VPN is on. While you use VPN, your iPhone will use the DNS server provided by VPN.

[ChildFilter55]

I have found the problem. As far as I can see. On the iPhone, under Settings, with the Wi-Fi active, press the “i” and then disable “Limit IP address tracking”. After I did that, the NXFilter worked so far. Since I'm not done with the settings yet, I'm a little hesitant to mark the case as “solved”. I got the hint, among other possible causes, from Chatgpt.

Thanks for all your help.

[support200]

In my investigation, it's something similar to VPN. You will be using a DNS server by Apple to hide your iPhone from "Tacking". That means you provide your DNS query log to Apple. When they offer something for free, they get your private info in return. For example, so many email providers require your phone number to set some password recovery measure.

[ChildFilter55]

Thanks for the tip.

So I would have to leave this setting deactivated in order not to provide Apple with free data. Although this feature is advertised as a security feature!
Did I understand that correctly?

[support200]

Yes. If you really need a nice VPN, try something like ExpressVPN. They don't keep your log. At least that's what they say